ISC2 · CISSP
Security process data and reporting
CISSP · Lesson 25 of 34 · 3:08:52
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 CISSP exam, on the 2027 outline. In this lesson: security process data (account management, management review, backup verification, training, disaster recovery and business continuity), KPIs and KRIs, analyzing test and audit output, reporting, remediation, exception handling, and responsible disclosure. Includes three original practice questions.
Preview the topics
- The number of unpatched critical vulnerabilities on Larkspur’s servers has grown for six months. What kind of metric warns about this?
- An infusion pump cannot be patched until the vendor certifies an update next year. What should Larkspur do with this finding?
- A tester finds a flaw in a vendor’s electronic health record software. What does responsible disclosure require first?